基于免疫原理的网络入侵检测  

An Intrusion Detection System Based on Immune Principle

作　　者：黄光球[1] 李眩[1] 

机构地区：[1]西安建筑科技大学管理学院,陕西西安710055

出　　处：《微电子学与计算机》2008年第8期192-194,共3页Microelectronics & Computer

基　　金：陕西省教育厅专项基金项目(06JK258);西安建筑科技大学基础研究基金项目(JC0616)

摘　　要：在入侵检测系统中引入生物免疫原理,建立一种基于免疫原理的入侵检测模型.在模型构建中,给出了抗体库的构建方法,并提出了出现新抗原后抗体库的更新方法以及抗体的变异策略;在对异常数据进行检测时,给出了亲和力瞬时值和综合值的计算方法;在对异常行为进行检测时,采用了成熟检测器进行异常行为的检测策略.该模型可以应用到大型网络的入侵检测,可提高检测的速度和准确性,具有较可靠的结果.The biological immune principle is introduced into create an intrusion detection system, the corresponding intrusion detection model is established. In establishment of the intrusion detection model, the construction method of the antibody base is given, the updating method of the antibody base is put forward after new antigens appear; the mutation strategy of antigens is also represented; in detecting abnormal data, the calculation methods of the instantaneous value and the synthetic value of affinity are given respectively; in detecting abnormal behaviors, the strategy based on the mature detectors is used to detect the abnormal activities. The model can be used to protect any large-scale network, the speed and the accuracy of intrusion detection are improved greatly; the detection result is more reliable.

关 键 词：免疫 入侵检测Self集 成熟检测器 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]